Skip to content

Merge main into live - #55755

Merged
gewarren merged 9 commits into
livefrom
main
Aug 27, 2026
Merged

gewarren merged 9 commits into
livefrom
main

Conversation

dependabot Bot and others added 8 commits August 26, 2026 14:44
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.20.1 to 2.21.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@b09bb98...05e3151)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Refit.HttpClientFactory from 15.0.0 to 15.2.0

---
updated-dependencies:
- dependency-name: Refit.HttpClientFactory
  dependency-version: 15.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Microsoft.Extensions.Azure from 1.14.0 to 1.14.1
Bumps Microsoft.Extensions.Hosting from 10.0.8 to 10.0.11

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Azure
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…nature is unsafe for untrusted input (#55645)

* SignedXml docs: warn in the verify how-to that parameterless CheckSignature is unsafe for untrusted input.

* Update docs/standard/security/how-to-verify-the-digital-signatures-of-xml-documents.md

Co-authored-by: Genevieve Warren <24882762+gewarren@users.noreply.github.com>

---------

Co-authored-by: Genevieve Warren <24882762+gewarren@users.noreply.github.com>
…ields (#55637)

* Document CA1878 performance rule

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Use lowercase CA1878 snippet path

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: azure-sdk <azuresdk@microsoft.com>
* Clarify F# spacing before invocation parentheses

The F# style guide stated that lower-case functions take a space before
a parenthesized argument and capitalized methods do not, but it never
said which part of a dotted name makes that choice, nor that the choice
is only available in the first place when the whole callee is a plain
dotted name.

Record both. The last part of the name selects the convention, and a
call, an index, a receiver that is not a name, or a type application in
front of the parentheses keeps them tight regardless. This is the rule
agreed at fsharp/fslang-design#648, which stops a fluent chain from
ending in a single spaced call.

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@dotnetrepoman dotnetrepoman Bot added this to the August 2026 milestone Aug 27, 2026
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Comment thread .github/workflows/ops-build-reporter.yml Dismissed
* Document MSTest CI report extensions

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 44f6903b-716b-447b-9d8d-bcbfd43eed7d

* Clarify MSTest CI report activation

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 44f6903b-716b-447b-9d8d-bcbfd43eed7d

---------

Copilot-Session: 44f6903b-716b-447b-9d8d-bcbfd43eed7d
@gewarren
gewarren merged commit 8a09e15 into live Aug 27, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants